Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8v4dmp99j3m20_5-f7Wb1gHCrkg.roa
File: 8v4dmp99j3m20_5-f7Wb1gHCrkg.roa (raw, json)
Hash identifier: S9c3LMZuQ2/YRO2gaFsdJffGBenPWR1geBRI0tZfBeI=
Subject key identifier: F2:FE:1D:9A:9F:7D:8F:79:B6:D3:FE:7E:7F:B5:9B:D6:01:C2:AE:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E5E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8v4dmp99j3m20_5-f7Wb1gHCrkg.roa
Signing time: Thu 11 Apr 2024 17:52:46 +0000
ROA not before: Thu 11 Apr 2024 17:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15966 (0x3e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 17:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2FE1D9A9F7D8F79B6D3FE7E7FB59BD601C2AE48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:4c:d9:dc:bd:96:a5:a8:bf:f2:72:45:08:
f5:a3:01:39:b1:2f:b9:45:96:a5:0a:21:01:18:bd:
d3:3b:fc:c7:d3:d4:a8:01:30:d0:7d:28:58:8e:ef:
a0:7c:01:20:28:f6:56:a6:89:58:67:72:9e:82:70:
d2:ce:ab:80:d4:2e:46:4b:63:1d:b9:5d:6e:5f:de:
92:cf:b1:6f:b7:38:3d:74:c7:d3:3a:ff:aa:7a:10:
fc:55:8a:08:b8:ca:3f:7e:e4:03:20:7c:81:4a:e5:
69:41:6a:fa:3b:4a:9d:c5:a5:11:15:28:99:0c:34:
f9:d6:7c:f5:8f:b9:9e:2b:37:dd:48:53:8f:9d:20:
71:78:64:62:74:f4:ce:ef:20:ee:d3:91:ae:a7:a5:
14:c1:0e:00:16:3b:d6:84:4c:cb:4f:81:9f:2c:9c:
42:b4:b3:66:55:2b:8a:68:96:00:dc:46:16:8a:a6:
f1:8a:52:c4:44:c7:86:a3:aa:97:3b:40:6d:0c:2b:
08:8b:fe:fe:a8:a1:ea:fc:26:81:b9:e9:e7:56:9f:
dc:cd:e6:cc:ad:88:07:41:f0:f7:df:30:07:5a:47:
f2:c8:96:81:1a:0d:ba:a2:9a:f3:20:20:75:8e:c2:
71:fc:6b:b2:70:c9:c7:1f:82:26:c1:33:d4:36:00:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:1D:9A:9F:7D:8F:79:B6:D3:FE:7E:7F:B5:9B:D6:01:C2:AE:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8v4dmp99j3m20_5-f7Wb1gHCrkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:6a:cd:9c:7a:0a:4b:70:af:46:93:e3:6e:95:ee:5e:99:af:
8b:f6:3d:ad:4d:46:01:5f:4c:2a:0f:03:28:80:33:4a:df:cd:
ce:0b:0e:83:98:df:89:b5:bb:28:df:96:62:db:d1:cd:cc:96:
16:5f:41:3f:7b:8d:e9:ad:ad:9f:bc:4f:be:ad:92:67:db:5f:
e7:86:cc:85:75:b2:e1:01:d6:79:bc:2b:87:dd:10:e6:49:16:
28:d9:df:49:59:53:78:11:81:6f:b4:02:3f:f2:0a:ca:2e:cc:
ee:06:c0:23:0c:92:f3:31:26:17:b1:7a:12:36:45:d5:cd:b6:
66:b7:d5:1d:93:ca:f4:5b:d5:c5:d8:d7:68:3f:32:84:17:1d:
31:65:1f:0d:a5:7b:fa:9b:d5:a4:dd:07:60:6d:c1:79:f9:a3:
b3:c1:0a:61:05:c3:d9:54:8d:d9:c8:a9:b4:56:4a:00:63:ed:
77:15:54:84:fa:b4:e8:5d:37:79:11:bd:3c:bc:a7:23:e0:e2:
99:e5:1d:18:d5:67:ee:0b:81:1a:9f:b4:58:fa:39:9d:7c:f9:
fd:80:7e:42:33:6c:30:af:77:0c:61:9f:b7:78:f3:43:5a:a1:
5d:b2:da:0b:e6:72:3d:3d:3c:aa:02:cc:98:ca:10:06:cb:86:
f9:52:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 01:38:41 2024 by rpki-client on console.sobornost.net